SQL Injection Vulnerability in itsourcecode Online Student Enrollment System
CVE-2026-36234

Currently unrated

Key Information:

Vendor: itsourcecode
Status: Online Student Enrollment System
Vendor: CVE Published:; 10 April 2026

🔔 Create itsourcecode Vulnerability Alert

What is CVE-2026-36234?

The itsourcecode Online Student Enrollment System is susceptible to an SQL injection vulnerability found in the newCourse.php file. This flaw allows attackers to manipulate database queries via the 'coursename' parameter, potentially leading to unauthorized data access or modification. Users are advised to apply appropriate security measures to protect their systems from exploitation.

References

https://github.com/Amorsec/CVE-PHP/blob/main/itsourcecode...

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 10, 2026
Vulnerability Reserved
Apr 6, 2026

CVE-2026-36234 Data

JSON